@rynfar/meridian 1.72.0 → 1.73.0

package/dist/proxy/supervision.d.ts

@@ -0,0 +1,41 @@
+/**
+ * How this proxy was started, so a page that needs a restart can say HOW.
+ *
+ * The telemetry stores are built once at startup, so changing where telemetry
+ * is kept takes effect on the next start and not before. A settings page that
+ * says "restart to apply" and stops there has handed the reader a puzzle: the
+ * unit is named by whoever installed it, `systemctl restart` without `--user`
+ * silently addresses a different manager, and a proxy started by hand has no
+ * unit at all. All of that is already written in /proc/self/cgroup.
+ *
+ * Linux-only by nature; everywhere else this reports `unknown` and the page
+ * falls back to "restart Meridian", which is the honest answer there.
+ *
+ * Leaf module: the parsing is pure and separately testable, and the single
+ * read is wrapped so a missing or unreadable cgroup file degrades to
+ * `unknown` rather than throwing during a settings fetch.
+ */
+export type SupervisionKind = "systemd-user" | "systemd-system" | "unknown";
+export interface Supervision {
+    kind: SupervisionKind;
+    /** Unit name, e.g. "meridian-dev.service". Null when not under a unit. */
+    unit: string | null;
+    /** Exactly what to run to apply a restart-scoped change, or null when
+     *  nothing can be named with confidence. */
+    restartCommand: string | null;
+}
+/**
+ * Read the unit out of a cgroup file's contents.
+ *
+ * Handles both hierarchies: cgroup v2 writes one `0::/path` line, v1 writes
+ * several `id:controllers:/path` lines. Taking the substring after the last
+ * colon yields the path in either case.
+ *
+ * A `.scope` leaf (`session-2.scope`, `init.scope`) is deliberately NOT a
+ * match: a scope is how systemd accounts for a process it did not launch, so
+ * a proxy started by hand in a terminal lands in one. Reporting that as a unit
+ * would print a `systemctl restart session-2.scope` that fails.
+ */
+export declare function parseSupervision(cgroup: string): Supervision;
+export declare function detectSupervision(): Supervision;
+//# sourceMappingURL=supervision.d.ts.map

package/dist/proxy/supervision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervision.d.ts","sourceRoot":"","sources":["../../src/proxy/supervision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,MAAM,MAAM,eAAe,GAAG,cAAc,GAAG,gBAAgB,GAAG,SAAS,CAAA;AAE3E,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,eAAe,CAAA;IACrB,0EAA0E;IAC1E,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB;gDAC4C;IAC5C,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;CAC9B;AAQD;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAsB5D;AAED,wBAAgB,iBAAiB,IAAI,WAAW,CAQ/C"}

package/dist/proxy/tokenRefresh.d.ts

@@ -25,7 +25,7 @@
 export declare function configDirToKeychainService(claudeConfigDir: string): string;
 /** Map `claudeConfigDir` to the file-based credentials path. */
 export declare function configDirToCredentialsFile(claudeConfigDir: string): string;
-interface OAuthCredentials {
+export interface OAuthCredentials {
     accessToken: string;
     refreshToken: string;
     expiresAt: number;
@@ -42,8 +42,16 @@ interface OAuthCredentials {
     scopes?: string[];
     subscriptionType?: string;
     rateLimitTier?: string;
+    /**
+     * Which seat a Team member holds. The only field that separates a Premium
+     * seat from a Standard one: measured across twelve live accounts, every
+     * Premium seat reports `rate_limit_tier: "default_claude_max_5x"` — what a
+     * personal Max 5x reports — and a Standard seat reports `default_raven`,
+     * which names no published allotment at all.
+     */
+    seatTier?: string;
 }
-interface CredentialsFile {
+export interface CredentialsFile {
     claudeAiOauth: OAuthCredentials;
     [key: string]: unknown;
 }
@@ -77,6 +85,18 @@ export declare function createPlatformCredentialStore(opts?: {
 }): CredentialStore;
 /** Look up the appropriate file path for a profile (Linux convention even on macOS for inspection). */
 export declare function credentialsFilePathForProfile(claudeConfigDir?: string): string;
+/**
+ * What the stored credential says about this account's ability to authenticate.
+ *
+ * `unknown` is deliberately NOT a soft `absent`. `read()` answers `null` both
+ * for a credential that is not there and for one it could not parse, so from
+ * here the two are indistinguishable - and a Keychain that momentarily refuses,
+ * or a file caught mid-write, must never be allowed to report a working account
+ * as logged out. Only a credential that was read successfully and carries no
+ * access token is `absent`.
+ */
+export type StoredCredentialPresence = "present" | "absent" | "unknown";
+export declare function readStoredCredentialPresence(store: CredentialStore): Promise<StoredCredentialPresence>;
 /**
  * Refresh the Claude Code OAuth access token.
  *
@@ -132,8 +152,23 @@ export interface AuthRenewalStatus {
     /** True once inside the warning window — the field monitors should alert on. */
     renewalRequiredSoon: boolean;
 }
-/** Drop cached refresh-token expiries — for tests, and after a re-login. */
+/** Drop cached credential facts — for tests, and after a re-login. */
 export declare function resetAuthRenewalCache(): void;
+/**
+ * The plan fields a login persisted, as stored.
+ *
+ * `claude auth status` reports `subscriptionType` and nothing else, so the
+ * tier that separates Max 5x from Max 20x is only ever available here. Both
+ * fields are optional on disk — a credential file written before Meridian
+ * persisted them has neither — and absent keys are omitted rather than nulled
+ * so a caller can spread the result over a live status without erasing it.
+ */
+export interface StoredPlanFields {
+    subscriptionType?: string;
+    rateLimitTier?: string;
+    seatTier?: string;
+}
+export declare function getStoredPlanFields(store?: CredentialStore): Promise<StoredPlanFields>;
 export declare function getAuthRenewalStatus(store?: CredentialStore, warnDays?: number): Promise<AuthRenewalStatus>;
 /**
  * Start a self-rescheduling timer that refreshes the access token shortly
@@ -163,5 +198,4 @@ export declare function stopBackgroundRefresh(): void;
 export declare function isBackgroundRefreshActive(): boolean;
 /** Reset in-flight state — for testing only. */
 export declare function resetInflightRefresh(): void;
-export {};
 //# sourceMappingURL=tokenRefresh.d.ts.map

package/dist/proxy/tokenRefresh.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tokenRefresh.d.ts","sourceRoot":"","sources":["../../src/proxy/tokenRefresh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAkBH;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,CAK1E;AAED,gEAAgE;AAChE,wBAAgB,0BAA0B,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,CAE1E;AAED,UAAU,gBAAgB;IACxB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB;;;;;;;;OAQG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,UAAU,eAAe;IACvB,aAAa,EAAE,gBAAgB,CAAA;IAC/B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB;AAMD,MAAM,WAAW,eAAe;IAC9B,kFAAkF;IAClF,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,IAAI,IAAI,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAA;IACvC,KAAK,CAAC,WAAW,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACtD;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,eAAe,GAAG,MAAM,CAEzE;AA4GD;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAAC,IAAI,CAAC,EAAE;IAAE,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,eAAe,CAQlG;AAED,uGAAuG;AACvG,wBAAgB,6BAA6B,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,CAE9E;AAUD;;;;;;;;;;GAUG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAsBjF;AA6FD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,CAAC,EAAE,eAAe,EACvB,QAAQ,SAAgB,GACvB,OAAO,CAAC,OAAO,CAAC,CAOlB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,IAAI,CAAA;AAE1C;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGtE;AAED,MAAM,WAAW,iBAAiB;IAChC,4DAA4D;IAC5D,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,0DAA0D;IAC1D,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,gFAAgF;IAChF,mBAAmB,EAAE,OAAO,CAAA;CAC7B;AA6BD,4EAA4E;AAC5E,wBAAgB,qBAAqB,IAAI,IAAI,CAG5C;AA2CD,wBAAsB,oBAAoB,CACxC,KAAK,CAAC,EAAE,eAAe,EACvB,QAAQ,SAA4B,GACnC,OAAO,CAAC,iBAAiB,CAAC,CAkB5B;AAiBD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,CAAC,EAAE,eAAe,EACvB,QAAQ,SAAgB,EACxB,cAAc,SAAgB,GAC7B,IAAI,CAKN;AAED,iDAAiD;AACjD,wBAAgB,qBAAqB,IAAI,IAAI,CAK5C;AAoED,wBAAwB;AACxB,wBAAgB,yBAAyB,IAAI,OAAO,CAEnD;AAED,gDAAgD;AAChD,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C"}
+{"version":3,"file":"tokenRefresh.d.ts","sourceRoot":"","sources":["../../src/proxy/tokenRefresh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAoBH;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,CAK1E;AAED,gEAAgE;AAChE,wBAAgB,0BAA0B,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,CAE1E;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB;;;;;;;;OAQG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,gBAAgB,CAAA;IAC/B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB;AAMD,MAAM,WAAW,eAAe;IAC9B,kFAAkF;IAClF,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,IAAI,IAAI,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAA;IACvC,KAAK,CAAC,WAAW,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACtD;AA+BD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,eAAe,GAAG,MAAM,CAEzE;AA4GD;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAAC,IAAI,CAAC,EAAE;IAAE,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,eAAe,CAQlG;AAED,uGAAuG;AACvG,wBAAgB,6BAA6B,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,CAE9E;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,wBAAwB,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAA;AAEvE,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,eAAe,GACrB,OAAO,CAAC,wBAAwB,CAAC,CAUnC;AAUD;;;;;;;;;;GAUG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAmCjF;AAmHD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,CAAC,EAAE,eAAe,EACvB,QAAQ,SAAgB,GACvB,OAAO,CAAC,OAAO,CAAC,CAclB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,IAAI,CAAA;AAE1C;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGtE;AAED,MAAM,WAAW,iBAAiB;IAChC,4DAA4D;IAC5D,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,0DAA0D;IAC1D,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,gFAAgF;IAChF,mBAAmB,EAAE,OAAO,CAAA;CAC7B;AA2CD,sEAAsE;AACtE,wBAAgB,qBAAqB,IAAI,IAAI,CAG5C;AAiDD;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,wBAAsB,mBAAmB,CACvC,KAAK,CAAC,EAAE,eAAe,GACtB,OAAO,CAAC,gBAAgB,CAAC,CAQ3B;AAED,wBAAsB,oBAAoB,CACxC,KAAK,CAAC,EAAE,eAAe,EACvB,QAAQ,SAA4B,GACnC,OAAO,CAAC,iBAAiB,CAAC,CAkB5B;AAiBD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,CAAC,EAAE,eAAe,EACvB,QAAQ,SAAgB,EACxB,cAAc,SAAgB,GAC7B,IAAI,CAUN;AAED,iDAAiD;AACjD,wBAAgB,qBAAqB,IAAI,IAAI,CAK5C;AAoED,wBAAwB;AACxB,wBAAgB,yBAAyB,IAAI,OAAO,CAEnD;AAED,gDAAgD;AAChD,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C"}

package/dist/server.js

@@ -11,14 +11,18 @@ import {
   runObserveHook,
   runTransformHook,
   startProxyServer
-} from "./cli-ab7zkp1a.js";
-import"./cli-5jxyma6z.js";
+} from "./cli-p5zbk952.js";
+import"./cli-82e2m44k.js";
+import"./cli-dh0a1bw4.js";
+import"./cli-8sw5wr9j.js";
+import"./cli-grfp0s1j.js";
 import"./cli-sry5aqdj.js";
-import"./cli-hj61zpt7.js";
-import"./cli-9e5cxp89.js";
-import"./cli-khhjyk04.js";
-import"./cli-vj9cv18n.js";
-import"./cli-hxxy0m1z.js";
+import"./cli-p9ca4p13.js";
+import"./cli-2h3w5n6g.js";
+import"./cli-chsp880k.js";
+import"./cli-1jstkdj9.js";
+import"./cli-qpfky8wy.js";
+import"./cli-eehk3052.js";
 import"./cli-p9swy5t3.js";
 export {
   startProxyServer,

package/dist/settings.d.ts

@@ -0,0 +1,83 @@
+/**
+ * Persistent server settings.
+ *
+ * Stored in ~/.config/meridian/settings.json (MERIDIAN_CONFIG_DIR moves the
+ * directory). Survives proxy restarts.
+ * Shared between CLI, UI, and API — browser localStorage is only used
+ * for client-only preferences (theme, collapsed sections, etc.).
+ *
+ * Lives at the src root, beside env.ts, rather than under proxy/, because
+ * telemetry reads it too and telemetry may not import from proxy —
+ * dependencies flow proxy → telemetry only. env.ts is the existing precedent
+ * for "configuration both layers need"; a copy of the path logic in each
+ * would be two things to keep agreeing about MERIDIAN_CONFIG_DIR.
+ *
+ * Leaf module: node builtins only, no imports from anywhere in the tree.
+ */
+import type { PriorityFailbackPolicy } from "./proxy/routing";
+export interface MeridianSettings {
+    /** Last active profile ID — restored on proxy startup */
+    activeProfile?: string;
+    /** Profile routing mode (#383, priority spec): "active" (default),
+     *  "sticky", or "priority". MERIDIAN_ROUTING env var takes precedence. */
+    routing?: string;
+    /** Priority-mode pool order (highest priority first). Falls back to
+     *  profiles.json order. MERIDIAN_PROFILE_ORDER env var takes precedence. */
+    profileOrder?: string[];
+    priorityFailback?: PriorityFailbackPolicy;
+    /**
+     * Keep telemetry in SQLite instead of memory, so it survives a restart.
+     * MERIDIAN_TELEMETRY_PERSIST takes precedence.
+     *
+     * The four telemetry keys below differ from every other setting here in one
+     * way that the UI must not hide: the stores are built once at startup, so a
+     * change to any of them does nothing until the proxy is restarted. Routing
+     * is re-read per request; these are not, and cannot be without swapping a
+     * store out from under in-flight writes.
+     */
+    telemetryPersist?: boolean;
+    /** Days before persisted telemetry is deleted. MERIDIAN_TELEMETRY_RETENTION_DAYS wins. */
+    telemetryRetentionDays?: number;
+    /** Rows the in-memory ring holds. Ignored when persisting. MERIDIAN_TELEMETRY_SIZE wins. */
+    telemetrySize?: number;
+    /** Entries the in-memory diagnostic log ring holds. MERIDIAN_DIAGNOSTIC_LOG_SIZE wins. */
+    diagnosticLogSize?: number;
+}
+/**
+ * Accepted range for each numeric telemetry setting, and the reason for it.
+ *
+ * Lives here rather than in the route so the form and the validator read the
+ * same numbers: a page that offers a value the API rejects is a worse bug than
+ * either bound being slightly wrong.
+ *
+ * The upper bounds guard a value that only takes effect on the next start, so
+ * a typo is not discovered until a restart that then fails or thrashes. Both
+ * ring sizes are whole request/log records held in memory; a million rows is
+ * hundreds of megabytes of resident heap, which is not a setting anyone means
+ * to type. Retention is capped at ten years because SQLite cleanup deletes by
+ * a cutoff, and a cutoff further out than the data's usefulness simply never
+ * deletes anything.
+ */
+export declare const TELEMETRY_SETTING_LIMITS: {
+    readonly telemetryRetentionDays: {
+        readonly min: 1;
+        readonly max: 3650;
+    };
+    readonly telemetrySize: {
+        readonly min: 10;
+        readonly max: 1000000;
+    };
+    readonly diagnosticLogSize: {
+        readonly min: 10;
+        readonly max: 1000000;
+    };
+};
+/** Read settings from disk. Returns empty object if file doesn't exist or is invalid. */
+export declare function loadSettings(): MeridianSettings;
+/** Write settings to disk. Merges with existing settings (doesn't clobber unknown keys). */
+export declare function saveSettings(patch: Partial<MeridianSettings>): MeridianSettings;
+/** Get a single setting value, or undefined if not set. */
+export declare function getSetting<K extends keyof MeridianSettings>(key: K): MeridianSettings[K];
+/** Update a single setting. */
+export declare function setSetting<K extends keyof MeridianSettings>(key: K, value: MeridianSettings[K]): MeridianSettings;
+//# sourceMappingURL=settings.d.ts.map

package/dist/settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../src/settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAA;AAc7D,MAAM,WAAW,gBAAgB;IAC/B,yDAAyD;IACzD,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;8EAC0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;gFAC4E;IAC5E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,gBAAgB,CAAC,EAAE,sBAAsB,CAAA;IAEzC;;;;;;;;;OASG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,0FAA0F;IAC1F,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,4FAA4F;IAC5F,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,0FAA0F;IAC1F,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;CAI4B,CAAA;AAEjE,yFAAyF;AACzF,wBAAgB,YAAY,IAAI,gBAAgB,CAQ/C;AAED,4FAA4F;AAC5F,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,gBAAgB,CAO/E;AAED,2DAA2D;AAC3D,wBAAgB,UAAU,CAAC,CAAC,SAAS,MAAM,gBAAgB,EAAE,GAAG,EAAE,CAAC,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAExF;AAED,+BAA+B;AAC/B,wBAAgB,UAAU,CAAC,CAAC,SAAS,MAAM,gBAAgB,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,gBAAgB,CAEjH"}

package/dist/{setup-ndmjpy23.js → setup-7fr49z92.js}

@@ -15,7 +15,7 @@ import {
   notePluginlessOpenCodeRequest,
   pluginPathForGeneration,
   runSetup
-} from "./cli-hxxy0m1z.js";
+} from "./cli-82e2m44k.js";
 import"./cli-p9swy5t3.js";
 export {
   runSetup,

package/dist/statusProbe-9x9q261e.js

@@ -0,0 +1,151 @@
+import"./cli-p9swy5t3.js";
+
+// src/proxy/statusProbe.ts
+import { createServer } from "node:net";
+var PROBE_TIMEOUT_MS = 2000;
+function probeUrlBase(host, port) {
+  let target = host;
+  if (host === "0.0.0.0" || host === "")
+    target = "127.0.0.1";
+  else if (host === "::" || host === "[::]")
+    target = "::1";
+  const literal = target.includes(":") ? `[${target.replace(/^\[|\]$/g, "")}]` : target;
+  return `http://${literal}:${port}`;
+}
+var HEALTH_STATUSES = new Set(["healthy", "degraded", "unhealthy"]);
+function isMeridianHealthBody(body) {
+  if (typeof body !== "object" || body === null)
+    return false;
+  const record = body;
+  if (typeof record["status"] === "string" && HEALTH_STATUSES.has(record["status"]) && typeof record["version"] === "string") {
+    return true;
+  }
+  const error = record["error"];
+  if (record["type"] === "error" && typeof error === "object" && error !== null) {
+    return error["type"] === "authentication_error";
+  }
+  return false;
+}
+function describeForeignResponse(status, statusText, headers) {
+  const parts = [`HTTP ${status}${statusText ? ` ${statusText}` : ""}`];
+  const server = headers.get("server");
+  if (server)
+    parts.push(`server: ${server}`);
+  const contentType = headers.get("content-type");
+  if (contentType)
+    parts.push(contentType.split(";")[0].trim());
+  return parts.join(", ");
+}
+function isPortAvailable(host, port) {
+  return new Promise((resolve) => {
+    const probe = createServer();
+    probe.once("error", () => resolve(false));
+    probe.once("listening", () => probe.close(() => resolve(true)));
+    probe.listen(port, host);
+  });
+}
+async function readJson(fetchImpl, url, timeoutMs, apiKey) {
+  try {
+    const response = await fetchImpl(url, {
+      signal: AbortSignal.timeout(timeoutMs),
+      headers: apiKey ? { "x-api-key": apiKey } : undefined
+    });
+    let body = null;
+    try {
+      body = await response.json();
+    } catch {
+      body = null;
+    }
+    return { ok: true, status: response.status, statusText: response.statusText, body, headers: response.headers };
+  } catch (err) {
+    return { ok: false, reason: err instanceof Error ? err.message : String(err) };
+  }
+}
+async function readSection(fetchImpl, url, timeoutMs, apiKey) {
+  const result = await readJson(fetchImpl, url, timeoutMs, apiKey);
+  if (!result.ok)
+    return { data: null, reason: result.reason };
+  if (result.status === 401) {
+    return {
+      data: null,
+      reason: apiKey ? "the running instance rejected this MERIDIAN_API_KEY" : "the running instance requires an API key — set MERIDIAN_API_KEY"
+    };
+  }
+  if (result.status >= 400)
+    return { data: null, reason: `HTTP ${result.status}` };
+  if (result.body == null)
+    return { data: null, reason: "unreadable response" };
+  return { data: result.body };
+}
+async function probeMeridian(host, port, options = {}) {
+  const timeoutMs = options.timeoutMs ?? PROBE_TIMEOUT_MS;
+  const apiKey = options.apiKey || undefined;
+  const fetchImpl = options.fetchImpl ?? fetch;
+  const base = probeUrlBase(host, port);
+  const health = await readJson(fetchImpl, `${base}/health`, timeoutMs, apiKey);
+  if (!health.ok)
+    return { kind: "unreachable", description: health.reason };
+  if (!isMeridianHealthBody(health.body)) {
+    return {
+      kind: "foreign",
+      description: describeForeignResponse(health.status, health.statusText, health.headers)
+    };
+  }
+  const authRejected = health.status === 401;
+  const [profileList, quota, summary] = await Promise.all([
+    readSection(fetchImpl, `${base}/profiles/list`, timeoutMs, apiKey),
+    readSection(fetchImpl, `${base}/v1/usage/quota/all`, timeoutMs, apiKey),
+    readSection(fetchImpl, `${base}/telemetry/summary?window=86400000`, timeoutMs, apiKey)
+  ]);
+  const unavailable = {};
+  const accountsReason = profileList.reason ?? quota.reason;
+  if (accountsReason)
+    unavailable.accounts = `accounts unavailable — ${accountsReason}`;
+  if (summary.reason)
+    unavailable.traffic = `traffic unavailable — ${summary.reason}`;
+  return {
+    kind: "meridian",
+    snapshot: {
+      health: authRejected ? null : health.body,
+      profileList: profileList.data,
+      quota: quota.data,
+      summary: summary.data,
+      ...Object.keys(unavailable).length > 0 ? { unavailable } : {}
+    }
+  };
+}
+function formatStatusMessage(result, host, port) {
+  if (result.kind === "foreign") {
+    return [
+      `Error: http://${host}:${port} is not Meridian (${result.description}).`,
+      `  Something else owns that port. Point at the right one: MERIDIAN_PORT=<port> meridian status`
+    ].join(`
+`);
+  }
+  return [
+    `Error: no Meridian instance is listening on http://${host}:${port}.`,
+    `  Start one with: meridian`
+  ].join(`
+`);
+}
+function formatConflictMessage(result, host, port) {
+  const found = result.kind === "foreign" ? `Something is listening there, and it is not Meridian (${result.description}).` : `Something is holding the port but did not answer (${result.description}).`;
+  return [
+    `Error: ${host}:${port} is already in use.`,
+    found,
+    "",
+    `  Identify it with: lsof -i :${port}`,
+    `  Or use a different port: MERIDIAN_PORT=4567 meridian`
+  ].join(`
+`);
+}
+export {
+  probeUrlBase,
+  probeMeridian,
+  isPortAvailable,
+  isMeridianHealthBody,
+  formatStatusMessage,
+  formatConflictMessage,
+  describeForeignResponse,
+  PROBE_TIMEOUT_MS
+};

package/dist/telemetry/dashboard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dashboard.d.ts","sourceRoot":"","sources":["../../src/telemetry/dashboard.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,eAAO,MAAM,aAAa,QAgalB,CAAA"}
+{"version":3,"file":"dashboard.d.ts","sourceRoot":"","sources":["../../src/telemetry/dashboard.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,eAAO,MAAM,aAAa,QA8mBlB,CAAA"}

package/dist/telemetry/index.d.ts

@@ -1,12 +1,30 @@
-import type { ITelemetryStore, IDiagnosticLogStore } from "./types";
+import type { ITelemetryStore, IDiagnosticLogStore, ResolvedTelemetryConfig } from "./types";
+/**
+ * What this process WOULD use if it started right now.
+ *
+ * Called at startup to build the stores, and again by the settings API to
+ * detect a pending restart — the same function both times on purpose. A
+ * second copy of this precedence chain living in the settings route is how a
+ * page ends up confidently reporting a state the proxy is not in.
+ */
+export declare function resolveTelemetryConfig(): ResolvedTelemetryConfig;
 export declare const telemetryStore: ITelemetryStore;
 export declare const diagnosticLog: IDiagnosticLogStore;
+/**
+ * Entries the running diagnostic ring holds, null when persisting.
+ *
+ * The metric store reports its own shape through `describe()`; the log store
+ * has no such method, and adding one to IDiagnosticLogStore for a single
+ * number would widen an interface two classes implement.
+ */
+export declare const diagnosticLogCapacity: number | null;
 export { MemoryTelemetryStore } from "./store";
 export { MemoryDiagnosticLogStore } from "./logStore";
 export { createTelemetryRoutes } from "./routes";
 export { landingHtml } from "./landing";
 export { computePercentiles, computeSummary } from "./percentiles";
+export { collapseRouteChains, summarizeRoutes } from "./routeChain";
 export { renderPrometheusMetrics } from "./prometheus";
 export { createSqliteStores } from "./sqlite";
-export type { RequestMetric, TelemetrySummary, PhaseTiming, ITelemetryStore, IDiagnosticLogStore, DiagnosticLog, } from "./types";
+export type { RequestMetric, RouteHop, RouteKind, RouteProfileTally, RouteSummary, ResolvedTelemetryConfig, TelemetryRetention, TelemetrySummary, PhaseTiming, ITelemetryStore, IDiagnosticLogStore, DiagnosticLog, } from "./types";
 //# sourceMappingURL=index.d.ts.map

package/dist/telemetry/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/telemetry/index.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAA;AA2CnE,eAAO,MAAM,cAAc,EAAE,eAAkC,CAAA;AAC/D,eAAO,MAAM,aAAa,EAAE,mBAAwC,CAAA;AAEpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAA;AAC9C,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAA;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAA;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAClE,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAA;AAC7C,YAAY,EACV,aAAa,EACb,gBAAgB,EAChB,WAAW,EACX,eAAe,EACf,mBAAmB,EACnB,aAAa,GACd,MAAM,SAAS,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/telemetry/index.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAA;AA6B5F;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,IAAI,uBAAuB,CAWhE;AA6CD,eAAO,MAAM,cAAc,EAAE,eAAkC,CAAA;AAC/D,eAAO,MAAM,aAAa,EAAE,mBAAwC,CAAA;AAEpE;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,EAAE,MAAM,GAAG,IAAmC,CAAA;AAEhF,OAAO,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAA;AAC9C,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAA;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAA;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAClE,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAA;AAC7C,YAAY,EACV,aAAa,EACb,QAAQ,EACR,SAAS,EACT,iBAAiB,EACjB,YAAY,EACZ,uBAAuB,EACvB,kBAAkB,EAClB,gBAAgB,EAChB,WAAW,EACX,eAAe,EACf,mBAAmB,EACnB,aAAa,GACd,MAAM,SAAS,CAAA"}

package/dist/telemetry/landing.d.ts

@@ -5,7 +5,7 @@
  * (usage + est. cost, click to switch the active profile), and a compact
  * 24h traffic strip. Site chrome (logo, nav, status) lives in the shared
  * header from profileBar.ts. Fetches /health, /telemetry/summary,
- * /v1/usage/quota/all and /profiles/list client-side for live data.
+ * /v1/usage/quota/all, /profiles/list and /settings/api/routing client-side for live data.
  */
 export declare const landingHtml: string;
 //# sourceMappingURL=landing.d.ts.map

package/dist/telemetry/landing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"landing.d.ts","sourceRoot":"","sources":["../../src/telemetry/landing.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,eAAO,MAAM,WAAW,QA8QhB,CAAA"}
+{"version":3,"file":"landing.d.ts","sourceRoot":"","sources":["../../src/telemetry/landing.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAQH,eAAO,MAAM,WAAW,QAigBhB,CAAA"}

package/dist/telemetry/logStore.d.ts

@@ -7,6 +7,17 @@
  */
 import type { DiagnosticLog, IDiagnosticLogStore } from "./types";
 export type { DiagnosticLog } from "./types";
+/**
+ * Tunable for the same reason the metric ring is: 500 entries is the tightest
+ * window in the telemetry system - the metric ring holds twice as many rows of
+ * a rarer event - and it was the only one with no way to change it, so the
+ * logs a bug report needs had usually scrolled away by the time anyone looked.
+ *
+ * Env beats the saved setting, which beats the default. A value that is not
+ * positive is discarded rather than falling through, so a typo cannot produce
+ * a zero-length ring.
+ */
+export declare function resolveDiagnosticLogCapacity(): number;
 export declare class MemoryDiagnosticLogStore implements IDiagnosticLogStore {
     private buffer;
     private head;

package/dist/telemetry/logStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logStore.d.ts","sourceRoot":"","sources":["../../src/telemetry/logStore.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAA;AACjE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAI5C,qBAAa,wBAAyB,YAAW,mBAAmB;IAClE,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,IAAI,CAAI;IAChB,OAAO,CAAC,KAAK,CAAI;IACjB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;gBAErB,QAAQ,CAAC,EAAE,MAAM;IAK7B,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,GAAG,IAAI;IAMlD,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;IAIlD,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;IAIlD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;IAIhD,SAAS,CAAC,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,aAAa,EAAE;IAgB/F,KAAK,IAAI,IAAI;CAKd;AAED,4CAA4C;AAC5C,eAAO,MAAM,aAAa,0BAAiC,CAAA"}
+{"version":3,"file":"logStore.d.ts","sourceRoot":"","sources":["../../src/telemetry/logStore.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAA;AACjE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAI5C;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,IAAI,MAAM,CAQrD;AAED,qBAAa,wBAAyB,YAAW,mBAAmB;IAClE,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,IAAI,CAAI;IAChB,OAAO,CAAC,KAAK,CAAI;IACjB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;gBAErB,QAAQ,CAAC,EAAE,MAAM;IAK7B,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,GAAG,IAAI;IAMlD,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;IAIlD,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;IAIlD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;IAIhD,SAAS,CAAC,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,aAAa,EAAE;IAgB/F,KAAK,IAAI,IAAI;CAKd;AAED,4CAA4C;AAC5C,eAAO,MAAM,aAAa,0BAAiC,CAAA"}

package/dist/telemetry/pricingStore.d.ts

@@ -5,8 +5,8 @@
  * static table in pricing.ts doesn't know about (custom routers, brand-new
  * releases). Overrides win over the built-in table in resolveModelPricing.
  *
- * Persisted to ~/.config/meridian/model-pricing.json (override the path with
- * MERIDIAN_PRICING_CONFIG). Read at request time with a short cache, so
+ * Persisted to model-pricing.json in the config directory (override the path
+ * with MERIDIAN_PRICING_CONFIG). Read at request time with a short cache, so
  * settings-page edits show up on the next dashboard refresh without a proxy
  * restart. Mirrors the sdkFeatures.ts persistence pattern.
  */

package/dist/telemetry/pricingStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pricingStore.d.ts","sourceRoot":"","sources":["../../src/telemetry/pricingStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,OAAO,EAIL,KAAK,YAAY,EAClB,MAAM,WAAW,CAAA;AAElB,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;AA8D3D,gFAAgF;AAChF,wBAAgB,mBAAmB,IAAI,gBAAgB,CAEtD;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,YAAY,CAwBhE;AAED,uEAAuE;AACvE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOtD;AAED,0DAA0D;AAC1D,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,GAAG,IAAI,CAI7E;AAED,+EAA+E;AAC/E,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAKzD;AAED,4EAA4E;AAC5E,wBAAgB,0BAA0B,IAAI,IAAI,CAIjD"}
+{"version":3,"file":"pricingStore.d.ts","sourceRoot":"","sources":["../../src/telemetry/pricingStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,OAAO,EAIL,KAAK,YAAY,EAClB,MAAM,WAAW,CAAA;AAElB,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;AA6D3D,gFAAgF;AAChF,wBAAgB,mBAAmB,IAAI,gBAAgB,CAEtD;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,YAAY,CAwBhE;AAED,uEAAuE;AACvE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOtD;AAED,0DAA0D;AAC1D,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,GAAG,IAAI,CAI7E;AAED,+EAA+E;AAC/E,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAKzD;AAED,4EAA4E;AAC5E,wBAAgB,0BAA0B,IAAI,IAAI,CAIjD"}

package/dist/telemetry/profileBar.d.ts

@@ -27,9 +27,9 @@ export declare const themeCss = "\n  :root {\n    /* Cool-gray neutral palette.
  * pole. Scales cleanly from favicon to hero size.
  */
 export declare const meridianLogoSvg = "<svg class=\"mh-logo\" width=\"24\" height=\"24\" viewBox=\"0 0 64 64\" fill=\"none\" xmlns=\"http://www.w3.org/2000/svg\" aria-hidden=\"true\">\n  <defs>\n    <linearGradient id=\"mhGrad\" x1=\"32\" y1=\"4\" x2=\"32\" y2=\"60\" gradientUnits=\"userSpaceOnUse\">\n      <stop stop-color=\"#58a6ff\"/>\n      <stop offset=\"1\" stop-color=\"#bc8cff\"/>\n    </linearGradient>\n  </defs>\n  <circle cx=\"32\" cy=\"32\" r=\"25\" stroke=\"url(#mhGrad)\" stroke-width=\"3.5\"/>\n  <ellipse cx=\"32\" cy=\"32\" rx=\"10.5\" ry=\"25\" stroke=\"url(#mhGrad)\" stroke-width=\"2.5\" opacity=\"0.8\"/>\n  <path d=\"M7 32h50\" stroke=\"url(#mhGrad)\" stroke-width=\"2\" opacity=\"0.4\"/>\n  <circle cx=\"32\" cy=\"7\" r=\"4.5\" fill=\"#58a6ff\"/>\n  <circle cx=\"32\" cy=\"57\" r=\"4.5\" fill=\"#bc8cff\"/>\n</svg>";
-export declare const profileBarCss = "\n  .meridian-header {\n    position: sticky; top: 0; z-index: 100;\n    display: flex; align-items: center; gap: 20px;\n    padding: 10px 24px;\n    background: rgba(13, 17, 23, 0.92);\n    backdrop-filter: blur(12px);\n    border-bottom: 1px solid var(--border, #30363d);\n  }\n  .meridian-header .mh-brand {\n    display: flex; align-items: center; gap: 10px;\n    text-decoration: none; color: var(--text, #e6edf3);\n  }\n  .meridian-header .mh-logo { display: block; }\n  .meridian-header .mh-name {\n    font-size: 15px; font-weight: 700; letter-spacing: 2px;\n    text-transform: uppercase;\n  }\n  .meridian-header .mh-nav { display: flex; align-items: center; gap: 2px; }\n  .meridian-header .mh-nav a {\n    color: var(--muted, #8b949e); text-decoration: none; font-size: 12px;\n    font-weight: 500; padding: 5px 10px; border-radius: 6px;\n    transition: color 0.15s, background 0.15s;\n  }\n  .meridian-header .mh-nav a:hover { color: var(--text, #e6edf3); background: var(--surface, #161b22); }\n  .meridian-header .mh-nav a.active { color: var(--accent, #58a6ff); background: var(--surface, #161b22); }\n  .meridian-header .mh-right {\n    margin-left: auto; display: flex; align-items: center; gap: 10px;\n  }\n  .meridian-header .mh-profile {\n    display: none; align-items: center; gap: 6px;\n    font-size: 11px; font-weight: 500; color: var(--text, #e6edf3);\n    padding: 3px 10px; border-radius: 20px;\n    background: var(--surface, #161b22); border: 1px solid var(--border, #30363d);\n    text-decoration: none; transition: border-color 0.15s;\n  }\n  .meridian-header .mh-profile:hover { border-color: var(--accent, #58a6ff); }\n  .meridian-header .mh-profile.visible { display: inline-flex; }\n  .meridian-header .mh-profile .mh-profile-type {\n    color: var(--muted, #8b949e); font-size: 10px;\n  }\n  /* Build chip \u2014 two mutually exclusive states, and the colour is not a\n     style choice: \"update available\" is a link to the releases page, so it\n     is blue (interactive); \"local/dev build\" is a meta annotation with no\n     href, so it is violet. Swapping them would break the DESIGN.md rule. */\n  .meridian-header .mh-build {\n    display: none; align-items: center; gap: 6px;\n    font-size: 11px; font-weight: 500; white-space: nowrap;\n    padding: 3px 10px; border-radius: 20px; text-decoration: none;\n    transition: background 0.15s;\n  }\n  .meridian-header .mh-build.visible { display: inline-flex; }\n  .meridian-header .mh-build.update {\n    color: var(--accent, #58a6ff);\n    background: rgba(88,166,255,0.12);\n    border: 1px solid rgba(88,166,255,0.35);\n  }\n  .meridian-header .mh-build.update:hover { background: rgba(88,166,255,0.18); }\n  .meridian-header .mh-build.provenance {\n    color: var(--accent2, #bc8cff);\n    background: rgba(188,140,255,0.12);\n    border: 1px solid rgba(188,140,255,0.35);\n    cursor: default;\n  }\n  .meridian-header .mh-status {\n    display: inline-flex; align-items: center; gap: 6px;\n    font-size: 11px; color: var(--muted, #8b949e); white-space: nowrap;\n  }\n  .meridian-header .mh-dot {\n    width: 8px; height: 8px; border-radius: 50%;\n    background: var(--muted, #8b949e); flex-shrink: 0;\n  }\n  .meridian-header .mh-dot.healthy { background: var(--green, #3fb950); box-shadow: 0 0 6px rgba(63,185,80,0.5); }\n  .meridian-header .mh-dot.degraded { background: var(--yellow, #d29922); }\n  .meridian-header .mh-dot.unhealthy { background: var(--red, #f85149); }\n  @media (max-width: 720px) {\n    .meridian-header { gap: 10px; padding: 10px 16px; flex-wrap: wrap; }\n    .meridian-header .mh-name { display: none; }\n    .meridian-header .mh-status .mh-status-text { display: none; }\n  }\n";
+export declare const profileBarCss = "\n  .meridian-header {\n    position: sticky; top: 0; z-index: 100;\n    display: flex; align-items: center; gap: 20px;\n    padding: 10px 24px;\n    background: rgba(13, 17, 23, 0.92);\n    backdrop-filter: blur(12px);\n    border-bottom: 1px solid var(--border, #30363d);\n  }\n  .meridian-header .mh-brand {\n    display: flex; align-items: center; gap: 10px;\n    text-decoration: none; color: var(--text, #e6edf3);\n  }\n  .meridian-header .mh-logo { display: block; }\n  .meridian-header .mh-name {\n    font-size: 15px; font-weight: 700; letter-spacing: 2px;\n    text-transform: uppercase;\n  }\n  .meridian-header .mh-nav { display: flex; align-items: center; gap: 2px; }\n  .meridian-header .mh-nav a {\n    color: var(--muted, #8b949e); text-decoration: none; font-size: 12px;\n    font-weight: 500; padding: 5px 10px; border-radius: 6px;\n    transition: color 0.15s, background 0.15s;\n  }\n  .meridian-header .mh-nav a:hover { color: var(--text, #e6edf3); background: var(--surface, #161b22); }\n  .meridian-header .mh-nav a.active { color: var(--accent, #58a6ff); background: var(--surface, #161b22); }\n  .meridian-header .mh-right {\n    margin-left: auto; display: flex; align-items: center; gap: 10px;\n  }\n  .meridian-header .mh-profile {\n    display: none; align-items: center; gap: 6px;\n    font-size: 11px; font-weight: 500; color: var(--text, #e6edf3);\n    padding: 3px 10px; border-radius: 20px;\n    background: var(--surface, #161b22); border: 1px solid var(--border, #30363d);\n    text-decoration: none; transition: border-color 0.15s;\n  }\n  .meridian-header .mh-profile:hover { border-color: var(--accent, #58a6ff); }\n  .meridian-header .mh-profile.visible { display: inline-flex; }\n  .meridian-header .mh-profile .mh-profile-type {\n    color: var(--muted, #8b949e); font-size: 10px;\n  }\n  /* Build chip \u2014 two mutually exclusive states, and the colour is not a\n     style choice: \"update available\" is a link to the releases page, so it\n     is blue (interactive); \"local/dev build\" is a meta annotation with no\n     href, so it is violet. Swapping them would break the DESIGN.md rule. */\n  .meridian-header .mh-build {\n    display: none; align-items: center; gap: 6px;\n    font-size: 11px; font-weight: 500; white-space: nowrap;\n    padding: 3px 10px; border-radius: 20px; text-decoration: none;\n    transition: background 0.15s;\n  }\n  .meridian-header .mh-build.visible { display: inline-flex; }\n  .meridian-header .mh-build.update {\n    color: var(--accent, #58a6ff);\n    background: rgba(88,166,255,0.12);\n    border: 1px solid rgba(88,166,255,0.35);\n  }\n  .meridian-header .mh-build.update:hover { background: rgba(88,166,255,0.18); }\n  .meridian-header .mh-build.provenance {\n    color: var(--accent2, #bc8cff);\n    background: rgba(188,140,255,0.12);\n    border: 1px solid rgba(188,140,255,0.35);\n    cursor: default;\n    .meridian-header .mh-profile.following { border-color: var(--accent2, #bc8cff); }\n  .meridian-header .mh-profile .mh-profile-follow {\n    color: var(--accent2, #bc8cff); font-size: 10px;  }\n  .meridian-header .mh-status {\n    display: inline-flex; align-items: center; gap: 6px;\n    font-size: 11px; color: var(--muted, #8b949e); white-space: nowrap;\n  }\n  .meridian-header .mh-dot {\n    width: 8px; height: 8px; border-radius: 50%;\n    background: var(--muted, #8b949e); flex-shrink: 0;\n  }\n  .meridian-header .mh-dot.healthy { background: var(--green, #3fb950); box-shadow: 0 0 6px rgba(63,185,80,0.5); }\n  .meridian-header .mh-dot.degraded { background: var(--yellow, #d29922); }\n  .meridian-header .mh-dot.unhealthy { background: var(--red, #f85149); }\n  @media (max-width: 720px) {\n    .meridian-header { gap: 10px; padding: 10px 16px; flex-wrap: wrap; }\n    .meridian-header .mh-name { display: none; }\n    .meridian-header .mh-status .mh-status-text { display: none; }\n  }\n";
 export declare const profileBarHtml = "\n<header class=\"meridian-header\" id=\"meridianHeader\">\n  <a class=\"mh-brand\" href=\"/\">\n    <svg class=\"mh-logo\" width=\"24\" height=\"24\" viewBox=\"0 0 64 64\" fill=\"none\" xmlns=\"http://www.w3.org/2000/svg\" aria-hidden=\"true\">\n  <defs>\n    <linearGradient id=\"mhGrad\" x1=\"32\" y1=\"4\" x2=\"32\" y2=\"60\" gradientUnits=\"userSpaceOnUse\">\n      <stop stop-color=\"#58a6ff\"/>\n      <stop offset=\"1\" stop-color=\"#bc8cff\"/>\n    </linearGradient>\n  </defs>\n  <circle cx=\"32\" cy=\"32\" r=\"25\" stroke=\"url(#mhGrad)\" stroke-width=\"3.5\"/>\n  <ellipse cx=\"32\" cy=\"32\" rx=\"10.5\" ry=\"25\" stroke=\"url(#mhGrad)\" stroke-width=\"2.5\" opacity=\"0.8\"/>\n  <path d=\"M7 32h50\" stroke=\"url(#mhGrad)\" stroke-width=\"2\" opacity=\"0.4\"/>\n  <circle cx=\"32\" cy=\"7\" r=\"4.5\" fill=\"#58a6ff\"/>\n  <circle cx=\"32\" cy=\"57\" r=\"4.5\" fill=\"#bc8cff\"/>\n</svg>\n    <span class=\"mh-name\">Meridian</span>\n  </a>\n  <nav class=\"mh-nav\">\n    <a href=\"/\" id=\"nav-home\">Home</a>\n    <a href=\"/telemetry\" id=\"nav-telemetry\">Telemetry</a>\n    <a href=\"/profiles\" id=\"nav-profiles\">Profiles</a>\n    <a href=\"/settings\" id=\"nav-settings\">Settings</a>\n    <a href=\"/plugins\" id=\"nav-plugins\">Plugins</a>\n  </nav>\n  <div class=\"mh-right\">\n    <a class=\"mh-build\" id=\"mhBuild\" target=\"_blank\" rel=\"noopener\"></a>\n    <a class=\"mh-profile\" id=\"mhProfile\" href=\"/\" title=\"Active profile \u2014 switch from the home page\"></a>\n    <span class=\"mh-status\" id=\"mhStatus\"><span class=\"mh-dot\" id=\"mhDot\"></span><span class=\"mh-status-text\" id=\"mhStatusText\"></span></span>\n  </div>\n</header>\n";
-export declare const profileBarJs = "\n(function() {\n  var profileChip = document.getElementById('mhProfile');\n  var buildChip = document.getElementById('mhBuild');\n  var statusDot = document.getElementById('mhDot');\n  var statusText = document.getElementById('mhStatusText');\n\n  // Highlight active nav link\n  var path = location.pathname;\n  var navLinks = document.querySelectorAll('.mh-nav a');\n  navLinks.forEach(function(a) {\n    if (a.getAttribute('href') === path || (path === '/telemetry' && a.id === 'nav-telemetry') || (path === '/' && a.id === 'nav-home')) {\n      a.classList.add('active');\n    }\n  });\n\n  function esc(s) { var d = document.createElement('div'); d.textContent = s; return d.innerHTML; }\n\n  // Build provenance chip. Hidden entirely for a current npm install, which\n  // is the case that needs no comment.\n  function renderBuild(build) {\n    if (!buildChip) return;\n    if (!build) { buildChip.className = 'mh-build'; return; }\n    if (build.source !== 'npm') {\n      buildChip.textContent = (build.source === 'dev' ? 'dev build' : 'local build') + (build.dirty ? ' *' : '');\n      buildChip.removeAttribute('href');\n      buildChip.title = 'Not an npm release \u2014 the reported version ' + build.version +\n        ' is the tree\\'s last release, not proof of what is running' +\n        (build.branch ? '\\nbranch: ' + build.branch : '') +\n        (build.sha ? '\\ncommit: ' + build.sha.slice(0, 8) : '') +\n        (build.dirty ? '\\nuncommitted changes present' : '');\n      buildChip.className = 'mh-build provenance visible';\n      return;\n    }\n    if (build.updateAvailable) {\n      buildChip.textContent = build.latest + ' available';\n      buildChip.href = 'https://github.com/rynfar/meridian/releases';\n      buildChip.title = 'Running ' + build.version + ' \u2014 update with:\\nnpm install -g @rynfar/meridian@latest';\n      buildChip.className = 'mh-build update visible';\n      return;\n    }\n    buildChip.className = 'mh-build';\n  }\n\n  function loadHeader() {\n    fetch('/health').then(function(r) { return r.json(); }).then(function(h) {\n      var st = h.status === 'healthy' ? 'healthy' : h.status === 'degraded' ? 'degraded' : 'unhealthy';\n      statusDot.className = 'mh-dot ' + st;\n      statusText.textContent = st === 'healthy' ? 'Operational' : st === 'degraded' ? 'Degraded' : 'Offline';\n      renderBuild(h.build);\n    }).catch(function() {\n      statusDot.className = 'mh-dot unhealthy';\n      statusText.textContent = 'Offline';\n    });\n\n    fetch('/profiles/list').then(function(r) { return r.json(); }).then(function(data) {\n      var current = (data.profiles || []).find(function(p) { return p.isActive; });\n      if (!current) { profileChip.classList.remove('visible'); return; }\n      profileChip.innerHTML = esc(current.id) + ' <span class=\"mh-profile-type\">' + esc(current.type || '') + '</span>';\n      profileChip.classList.add('visible');\n    }).catch(function() {});\n  }\n\n  loadHeader();\n  setInterval(loadHeader, 10000);\n  // Pages call this after mutating state (e.g. switching the active profile)\n  // so the header chip updates immediately instead of on the next poll.\n  window.meridianHeaderRefresh = loadHeader;\n})();\n";
+export declare const profileBarJs = "\n(function() {\n  var profileChip = document.getElementById('mhProfile');\n  var buildChip = document.getElementById('mhBuild');\n  var statusDot = document.getElementById('mhDot');\n  var statusText = document.getElementById('mhStatusText');\n\n  // Highlight active nav link\n  var path = location.pathname;\n  var navLinks = document.querySelectorAll('.mh-nav a');\n  navLinks.forEach(function(a) {\n    if (a.getAttribute('href') === path || (path === '/telemetry' && a.id === 'nav-telemetry') || (path === '/' && a.id === 'nav-home')) {\n      a.classList.add('active');\n    }\n  });\n\n  function esc(s) { var d = document.createElement('div'); d.textContent = s; return d.innerHTML; }\n\n  // Build provenance chip. Hidden entirely for a current npm install, which\n  // is the case that needs no comment.\n  function renderBuild(build) {\n    if (!buildChip) return;\n    if (!build) { buildChip.className = 'mh-build'; return; }\n    if (build.source !== 'npm') {\n      buildChip.textContent = (build.source === 'dev' ? 'dev build' : 'local build') + (build.dirty ? ' *' : '');\n      buildChip.removeAttribute('href');\n      buildChip.title = 'Not an npm release \u2014 the reported version ' + build.version +\n        ' is the tree\\'s last release, not proof of what is running' +\n        (build.branch ? '\\nbranch: ' + build.branch : '') +\n        (build.sha ? '\\ncommit: ' + build.sha.slice(0, 8) : '') +\n        (build.dirty ? '\\nuncommitted changes present' : '');\n      buildChip.className = 'mh-build provenance visible';\n      return;\n    }\n    if (build.updateAvailable) {\n      buildChip.textContent = build.latest + ' available';\n      buildChip.href = 'https://github.com/rynfar/meridian/releases';\n      buildChip.title = 'Running ' + build.version + ' \u2014 update with:\\nnpm install -g @rynfar/meridian@latest';\n      buildChip.className = 'mh-build update visible';\n      return;\n    }\n    buildChip.className = 'mh-build';\n  }\n\n  function loadHeader() {\n    fetch('/health').then(function(r) { return r.json(); }).then(function(h) {\n      var st = h.status === 'healthy' ? 'healthy' : h.status === 'degraded' ? 'degraded' : 'unhealthy';\n      statusDot.className = 'mh-dot ' + st;\n      statusText.textContent = st === 'healthy' ? 'Operational' : st === 'degraded' ? 'Degraded' : 'Offline';\n      renderBuild(h.build);\n    }).catch(function() {\n      statusDot.className = 'mh-dot unhealthy';\n      statusText.textContent = 'Offline';\n    });\n\n    fetch('/profiles/list').then(function(r) { return r.json(); }).then(function(data) {\n      var current = (data.profiles || []).find(function(p) { return p.isActive; });\n      if (!current) { profileChip.classList.remove('visible'); return; }\n      // Follow mode: say so on every page. An instance quietly taking its\n      // active profile from another one, with a picker that won't stick, is\n      // otherwise an hour of confusion.\n      var follow = data.follow;\n      var followLabel = follow ? (follow.activeProfile ? 'following' : 'follow: local') : '';\n      if (follow && follow.stale) followLabel += ' (stale)';\n      profileChip.innerHTML = esc(current.id) + ' <span class=\"mh-profile-type\">' + esc(current.type || '') + '</span>'\n        + (follow ? ' <span class=\"mh-profile-follow\">' + esc(followLabel) + '</span>' : '');\n      profileChip.classList.toggle('following', !!follow);\n      profileChip.title = follow\n        ? 'Active profile follows ' + follow.url + ' (MERIDIAN_FOLLOW_ACTIVE)'\n          + (follow.activeProfile ? '' : ' \u2014 no usable value from it, using the local profile')\n          + '. Switching here is refused; switch on the followed instance.'\n        : 'Active profile \u2014 switch from the home page';\n      profileChip.classList.add('visible');\n    }).catch(function() {});\n  }\n\n  loadHeader();\n  setInterval(loadHeader, 10000);\n  // Pages call this after mutating state (e.g. switching the active profile)\n  // so the header chip updates immediately instead of on the next poll.\n  window.meridianHeaderRefresh = loadHeader;\n})();\n";
 /** Native desktop chrome: system appearance with the canonical Meridian hues.
  * Web pages continue using themeCss and the shared profile header above. */
 export declare const desktopThemeCss = "\n  :root {\n    color-scheme: light dark;\n    --bg: #f4f5f7; --surface: #ffffff; --surface2: #edeff2;\n    --border: #dde0e5; --text: #23272e; --muted: #69717e;\n    --accent: #176bce; --accent2: #8250b5;\n    --green: #237c40; --yellow: #976400; --red: #ca3b36;\n    --sidebar: #e9edf1; --control: #ffffff; --control-border: #d0d5dc;\n  }\n  @media (prefers-color-scheme: dark) {\n    :root {\n      --bg: #0d1117; --surface: #161b22; --surface2: #1c2128;\n      --border: #30363d; --text: #e6edf3; --muted: #8b949e;\n      --accent: #58a6ff; --accent2: #bc8cff;\n      --green: #3fb950; --yellow: #d29922; --red: #f85149;\n      --sidebar: #161b22; --control: #242b35; --control-border: #39424e;\n    }\n  }\n  body { background: var(--bg); }\n  html.native-glass body { background: transparent; }\n";

package/dist/telemetry/profileBar.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"profileBar.d.ts","sourceRoot":"","sources":["../../src/telemetry/profileBar.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,QAAQ,6gDAwCpB,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,eAAe,syBAYrB,CAAA;AAEP,eAAO,MAAM,aAAa,ioHAgFzB,CAAA;AAED,eAAO,MAAM,cAAc,ypDAmB1B,CAAA;AAED,eAAO,MAAM,YAAY,4pGAqExB,CAAA;AAED;4EAC4E;AAC5E,eAAO,MAAM,eAAe,wyBAoB3B,CAAA;AAED,eAAO,MAAM,mBAAmB;;;;CAA2E,CAAA"}
+{"version":3,"file":"profileBar.d.ts","sourceRoot":"","sources":["../../src/telemetry/profileBar.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,QAAQ,6gDAwCpB,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,eAAe,syBAYrB,CAAA;AAEP,eAAO,MAAM,aAAa,i0HAkFzB,CAAA;AAED,eAAO,MAAM,cAAc,ypDAmB1B,CAAA;AAED,eAAO,MAAM,YAAY,6hIAkFxB,CAAA;AAED;4EAC4E;AAC5E,eAAO,MAAM,eAAe,wyBAoB3B,CAAA;AAED,eAAO,MAAM,mBAAmB;;;;CAA2E,CAAA"}

package/dist/telemetry/profileFacts.d.ts

@@ -0,0 +1,17 @@
+/**
+ * What a profile card states about an account, in one place.
+ *
+ * Two surfaces render the same list — the detail grid on /profiles and the
+ * hover overlay on the landing page — so the list lives here instead of being
+ * written twice and drifting apart the first time a row is added.
+ *
+ * Emitted as browser source rather than a TypeScript function because the
+ * pages are string templates concatenated at import time, the same arrangement
+ * `profileBarJs` uses. The unit tests evaluate this exact text, so what they
+ * assert is what the browser runs.
+ *
+ * Values are plain text; escaping is the page's job, since only the page knows
+ * whether it is filling a grid cell or an overlay row.
+ */
+export declare const profileFactsJs = "\nfunction timeAgo(ts) {\n  if (!ts) return '\\u2014';\n  var s = Math.floor((Date.now() - ts) / 1000);\n  if (s < 5) return 'just now';\n  if (s < 60) return s + 's ago';\n  if (s < 3600) return Math.floor(s / 60) + 'm ago';\n  if (s < 86400) return Math.floor(s / 3600) + 'h ago';\n  return new Date(ts).toLocaleString();\n}\n\nfunction profileFacts(p) {\n  var facts = [];\n  var authStale = p.authProvenance && p.authProvenance !== 'live';\n  var statusValue = p.authProvenance === 'never' ? 'never read' : (p.loggedIn ? '\\u2713 Authenticated' : '\\u2717 Not logged in');\n  facts.push({\n    label: 'Status',\n    value: statusValue,\n    tone: p.loggedIn ? 'ok' : 'err',\n    cached: authStale && p.authProvenance !== 'never'\n  });\n  if (p.email) facts.push({ label: 'Email', value: p.email, tone: '', cached: authStale });\n  if (p.organizationName) facts.push({ label: 'Organization', value: p.organizationName, tone: '' });\n  if (p.accountType) facts.push({ label: 'Account', value: p.accountType, tone: '' });\n  var plan = p.planName || p.planLabel || p.subscriptionType;\n  if (plan) facts.push({ label: 'Plan', value: plan, tone: '', cached: authStale, title: p.seatTier || p.rateLimitTier || '' });\n  if (p.allowance) facts.push({ label: 'Allowance', value: p.allowance + ' of a Pro plan\\u2019s Claude Code usage', shortValue: p.allowance, tone: '', title: p.rateLimitTier || '' });\n  if (p.aliases && p.aliases.length > 0) facts.push({ label: 'Former names', value: p.aliases.join(', '), tone: '', title: 'Requests naming these are served by this profile, until the name is added again' });\n  if (p.lastSuccessAt) facts.push({ label: 'Last Verified', value: timeAgo(p.lastSuccessAt), tone: 'ok' });\n  if (p.lastCheckedAt && p.lastCheckedAt !== p.lastSuccessAt) {\n    facts.push({ label: 'Last Checked', value: timeAgo(p.lastCheckedAt), tone: '' });\n  }\n  return facts;\n}\n";
+//# sourceMappingURL=profileFacts.d.ts.map

package/dist/telemetry/profileFacts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profileFacts.d.ts","sourceRoot":"","sources":["../../src/telemetry/profileFacts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,cAAc,i3DAkC1B,CAAA"}